Legal
Privacy Policy
Effective Date: February 7, 2026
picko (“Company”) values the privacy of its users and complies with applicable data protection laws. This Privacy Policy applies to the piliq application (“Service”) provided by the Company.
1. Personal Information We Collect
A. Information collected during registration
- Email address
- Name (nickname)
- Profile picture (for social login)
- Social login identifiers (Google, Apple)
B. Information automatically collected during service use
- Sleep data (bedtime, wake time, sleep stages, heart rate, etc.)
- Device information (OS version, app version, device model)
- App usage records (access time, feature usage frequency)
- Anonymous analytics data (app events, session information, Firebase Installation ID) via Google Analytics for Firebase
C. Health Data
- Sleep-related health data collected through Apple HealthKit or Google Health Connect
- This data is only collected with your explicit consent
2. Purpose of Collection and Use
We use collected personal information for the following purposes:
- User identification and service provision
- Sleep pattern analysis and personalized coaching
- Sleep score calculation and trend analysis
- Service improvement and new feature development
- Customer support and announcements
3. Retention Period
- Data is retained until account deletion and destroyed immediately upon request
- Data may be retained as required by applicable laws:
- Contract or withdrawal records: 5 years
- Payment and supply records: 5 years
- Consumer complaint records: 3 years
4. Third-Party Disclosure
We do not share your personal information with third parties except:
- When you have given prior consent
- When required by law
- When necessary for service provision (payment processing, etc.)
5. Health Data Processing
A. Sleep data is primarily stored in local device storage
B. HealthKit/Health Connect data is only accessed with your explicit consent
C. Health data is not used for advertising purposes
D. Health data is never sold to third parties
6. Screen Time API (Sleep Session Feature)
piliq uses Apple's Screen Time API (FamilyControls framework) to power the Sleep Session feature, which blocks distracting apps during your sleep time.
A. What we access: FamilyActivitySelection — an opaque token generated by iOS that represents your selected apps. piliq cannot read the actual app names, bundle identifiers, or any app metadata from this token.
B. Storage: Stored only on your local device (iOS secure storage). Never transmitted to our servers.
C. What we do not collect: App names, usage duration, launch count, or any app activity data.
D. Third-party sharing: None. This data never leaves your device.
E. Deletion: When you uninstall piliq, the FamilyActivitySelection token and all related data are automatically removed from your device.
7. Google Analytics for Firebase
piliq uses Google Analytics for Firebase (“GA4”) to collect anonymous usage analytics to improve the Service.
A. What we collect: App events (e.g., feature usage, screen views), session information, device type, and Firebase Installation ID (a device-level pseudonymous identifier generated by Firebase). No personally identifiable information is included.
B. No account required: Analytics data is collected at the device level via Firebase Installation ID. This means GA4 receives data even if you have not registered or logged in — the data is anonymous and cannot be linked to a specific user.
C. Data transmission: Analytics events are sent to Google's servers in the United States and are subject to Google's Privacy Policy.
D. Opt-out: You can disable analytics collection by turning off “Share Usage Data” in the app settings.
E. No health data: Sleep data, HealthKit data, and Screen Time API data are never transmitted to GA4.
8. Data Destruction
When personal information is no longer necessary, we destroy it without delay:
- Electronic files: Deleted using unrecoverable methods
- Paper documents: Shredded or incinerated
9. Your Rights
You may exercise the following rights at any time:
- Request access to your personal information
- Request correction of your personal information
- Request deletion of your personal information
- Request suspension of processing
- Delete your account
10. Security Measures
We implement the following security measures:
- Encryption of personal information (TLS for transmission, AES-256 for storage)
- Access control and restrictions
- Access logging and tamper prevention
- Security software installation and updates
11. Cookies
As a mobile application, this service does not use web cookies.
12. Data Protection Officer
13. Changes to This Policy
This Privacy Policy may be updated to reflect changes in laws, policies, or security practices. Changes will be announced through in-app notifications.